From 0e3b1af905ae84996ade8c4eb856a20f53746fb5 Mon Sep 17 00:00:00 2001 From: db1234719 Date: Tue, 18 Nov 2025 15:06:12 +0330 Subject: [PATCH] removed curl because of security risks and used busybox wget instead and combined some run commands into one with && as separator --- Dockerfile | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/Dockerfile b/Dockerfile index 1ab85a7..74dcf6e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -45,19 +45,16 @@ RUN ./configure \ --with-stream_realip_module \ --with-http_slice_module \ --with-http_v2_module -RUN make -j$(nproc) -RUN make install -RUN rm -rf /tmp/* -RUN rm -rf /var/cache/apk/* +RUN make && make install +RUN rm -rf /tmp/* && rm -rf /var/cache/apk/* # --- Stage 2: Runtime --- FROM alpine:3.22 # Runtime dependencies RUN apk add \ - pcre2 zlib openssl ca-certificates tzdata libcap curl git -RUN addgroup -S nginx -RUN adduser -D -S -h /var/cache/nginx -s /sbin/nologin -G nginx nginx + pcre2 zlib openssl ca-certificates tzdata libcap git +RUN addgroup -S nginx && adduser -D -S -h /var/cache/nginx -s /sbin/nologin -G nginx nginx RUN mkdir -p /var/cache/nginx /etc/nginx/conf.d /etc/nginx/stream_conf.d /usr/share/nginx/html /var/run RUN chown -R nginx:nginx /var/cache/nginx /var/run /etc/nginx /usr/share/nginx/html @@ -93,4 +90,5 @@ STOPSIGNAL SIGTERM CMD ["nginx", "-g", "daemon off;"] # Healthcheck -HEALTHCHECK --interval=30s --timeout=3s --retries=3 CMD curl -f http://127.0.0.1:80/ || exit 1 +HEALTHCHECK --interval=30s --timeout=3s --retries=3 CMD busybox wget --spider -q http://127.0.0.1:80/ || exit 1 +